Commit Graph

17 Commits

Author SHA1 Message Date
wj32 2c3c8a402f added ability to detach processes from debuggers
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1376 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-06-06 00:53:45 +00:00
wj32 b8f2e812ea * fixed several Windows 7 offsets
* fixed auxData size leading to a buffer overflow
* better credits screen

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1325 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-24 01:32:16 +00:00
wj32 963ac8990e added APC-related defs
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1319 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-22 10:52:53 +00:00
wj32 3812cfaab3 handle duplication is now protected (through object open hooks)
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1308 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-22 00:52:19 +00:00
wj32 c3625ea5fc * changed error when terminating self to STATUS_CANT_TERMINATE_SELF
* fixed some outdated comments
* added lots of defs to NProcessHacker KPH
* added test program

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1297 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-19 08:25:38 +00:00
wj32 ac906ee65e more ULONG_PTR usage in KPH
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1247 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-08 08:46:00 +00:00
wj32 30114f9047 added more comments to KProcessHacker
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1231 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-04 10:16:27 +00:00
wj32 741af29084 * KProcessHacker can now perform process memory reading/writing by itself and does not require MmCopyVirtualMemory
* added KphAssignImpersonationToken
* added KphAcquireProcessRundownProtection and KphReleaseProcessRundownProtection
* added some impersonation code

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1226 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-03 07:03:02 +00:00
wj32 5fbd0ba8b9 resurrected GUI thread highlighting which mysteriously disappeared recently
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1204 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-05-01 10:25:50 +00:00
wj32 8d2625dea8 fixed terminating own thread
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1103 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-19 22:53:47 +00:00
wj32 69a6811b71 added KphTerminateThread -> PspTerminateThreadByPointer
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1102 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-19 22:36:44 +00:00
wj32 1aaf0c4b2f new KPH method: scans for PsTerminateProcess instead of using fixed offsets
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1101 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-19 11:26:44 +00:00
wj32 22bf8a798e KphTerminateProcess now uses PsTerminateProcess where possible; if the wrong address is found it should not BSOD the system because the first 5 bytes are checked against the known standard function prologue.
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1099 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-19 09:51:04 +00:00
wj32 36d0d9299a * added new system for OS version-dependent data
* fixed GenericMapping offset for Windows XP

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1087 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-18 08:02:21 +00:00
wj32 fd789a3cbf * KphAttachProcess* functions
* improved handle viewing
* improved start addresses on Windows XP

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1085 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-18 02:52:10 +00:00
wj32 83ff30039b new KPH I/O control: ZwQueryObject
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1080 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-17 11:45:17 +00:00
wj32 5eccb86895 * reorganized KProcessHacker
* added KphDuplicateObject

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1078 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-04-17 02:29:25 +00:00